Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.mft
File:                     520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.mft (raw, json)
Hash identifier:          OSnO6mZ8ayMDG87FRJ+LKFuFjxVnFWfrctg3zZhCGv0=
Subject key identifier:   41:88:F0:C9:1F:BD:1F:9A:A9:BA:58:40:03:A6:E5:4D:8D:C0:52:5F
Authority key identifier: 85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D
Certificate issuer:       /CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8
Certificate serial:       2802AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.mft
Manifest number:          0DE7
Signing time:             Thu 28 Mar 2024 15:21:07 +0000
Manifest this update:     Thu 28 Mar 2024 14:20:15 +0000
Manifest next update:     Sun 31 Mar 2024 18:09:15 +0000
Files and hashes:         1: 294ba3b964b36a3ad6e11cab14bdc3d1219fdbdb.roa (hash: l0BD5Ra81IGvzmGx9aC9fNd40fG9UT4CeRQRqFw/lHU=)
                          2: 520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.crl (hash: QH3hPPdH6Yg9Dq57mHhaLCtah7IvLK3hN245lxJHF5U=)
                          3: 8b4a17b4a23cbb679c43abe2b06443ec3d7e6e25.roa (hash: FUwQDbBeFEe7b2WddfcCoQjpcoQPeQ4Ozme3XZ9jkBQ=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2622127 (0x2802af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8
        Validity
            Not Before: Mar 28 14:20:15 2024 GMT
            Not After : Mar 31 18:09:15 2024 GMT
        Subject: CN=a0baf5b6d0cc2b73a8f4d788142c485714278121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:13:72:0d:1d:e4:7a:43:87:ff:cc:e6:9d:39:
                    fc:0c:56:07:28:82:bf:99:d4:64:22:0e:ad:34:84:
                    b0:05:25:d3:2c:c1:bc:62:ff:14:36:9b:69:ed:ec:
                    41:7b:6c:fa:32:ca:fa:21:5d:73:0b:cb:da:1d:50:
                    42:00:fa:1c:f2:8f:a8:f3:1f:39:24:98:49:4f:75:
                    64:a2:7d:70:f8:4f:d8:85:4e:4c:94:46:8b:65:29:
                    3b:4c:47:4b:d9:4d:07:ac:d1:d5:ce:89:61:22:62:
                    ce:16:13:bf:41:12:93:1b:fc:41:a8:c5:3c:f8:34:
                    2b:c4:73:46:47:75:f4:bf:a5:84:95:a1:23:10:6d:
                    24:45:f2:5a:d7:b2:8f:e5:fa:ba:71:39:7a:52:a3:
                    23:04:ac:24:36:6c:fb:bc:8f:69:f5:99:ea:b9:48:
                    66:2b:ce:88:a7:f3:60:8e:7d:21:1e:44:27:47:a4:
                    7b:48:3a:a2:35:7e:b0:24:5c:e5:ab:87:27:f1:d3:
                    bf:11:bc:13:1c:e1:a3:ef:76:e6:99:5e:ce:89:16:
                    26:6d:53:b0:9e:8e:fb:66:3f:5d:26:88:ba:2a:f6:
                    94:f7:49:4a:03:df:58:65:66:38:5f:dc:81:ee:68:
                    d5:a7:3b:f4:f2:0b:9c:5b:a9:aa:98:60:bd:68:90:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:88:F0:C9:1F:BD:1F:9A:A9:BA:58:40:03:A6:E5:4D:8D:C0:52:5F
            X509v3 Authority Key Identifier:
                keyid:85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:dc:13:2a:61:6c:b6:ca:44:9a:88:7e:4a:25:c1:b0:af:
         14:d1:b7:f4:3e:a5:b6:8c:76:76:7d:4a:40:fd:43:ed:e7:56:
         fc:6b:08:aa:84:0e:fa:3f:2d:78:78:2e:f5:b4:00:1f:80:e1:
         5d:85:1f:4b:a6:c5:c9:4b:17:6d:01:42:b8:1a:19:df:a2:be:
         8a:2a:17:60:ad:a8:67:35:c1:96:9b:df:d7:36:30:03:34:c7:
         12:22:2f:f8:f7:4f:9d:98:44:b1:b1:70:fb:15:44:02:0b:a9:
         3a:de:87:d3:d6:5e:17:8b:c5:b2:ee:10:f0:ad:d6:84:65:a3:
         5b:fb:4c:9a:14:14:2a:4a:8b:dc:3e:4c:5d:ec:79:0b:b0:30:
         0d:c7:0f:85:fa:86:22:f4:c4:f2:e8:36:6b:7a:14:b3:f5:6d:
         33:5a:2e:16:c0:fb:bf:5b:37:15:71:80:a4:47:87:e2:9b:04:
         e7:80:5d:37:08:05:82:6f:96:a8:82:6c:29:21:01:03:99:3a:
         e1:97:76:65:36:98:9b:5f:65:f2:7c:03:09:dd:a2:1c:c6:00:
         22:13:7e:e9:7d:0a:9c:dd:cb:99:bc:5c:9f:2a:db:39:38:0c:
         ee:51:c3:32:3e:08:03:1f:17:21:50:6d:ab:92:f1:21:74:ac:
         40:95:f5:63
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKAKvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUy
MGEwZDVlNDViYTk4YjM2MjNmZDJlNGMyZjQ0ZDE5MjA3NmI3ZjgwHhcNMjQwMzI4
MTQyMDE1WhcNMjQwMzMxMTgwOTE1WjAzMTEwLwYDVQQDEyhhMGJhZjViNmQwY2My
YjczYThmNGQ3ODgxNDJjNDg1NzE0Mjc4MTIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhRNyDR3kekOH/8zmnTn8DFYHKIK/mdRkIg6tNISwBSXTLMG8
Yv8UNptp7exBe2z6Msr6IV1zC8vaHVBCAPoc8o+o8x85JJhJT3Vkon1w+E/YhU5M
lEaLZSk7TEdL2U0HrNHVzolhImLOFhO/QRKTG/xBqMU8+DQrxHNGR3X0v6WElaEj
EG0kRfJa17KP5fq6cTl6UqMjBKwkNmz7vI9p9ZnquUhmK86Ip/Ngjn0hHkQnR6R7
SDqiNX6wJFzlq4cn8dO/EbwTHOGj73bmmV7OiRYmbVOwno77Zj9dJoi6KvaU90lK
A99YZWY4X9yB7mjVpzv08gucW6mqmGC9aJDgJQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFEGI8MkfvR+aqbpYQAOm5U2NwFJfMB8GA1UdIwQYMBaAFIX1kZdy1/1B6u2A
kTA85ZLGyudtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTIwYTBk
NWU0NWJhOThiMzYyM2ZkMmU0YzJmNDRkMTkyMDc2YjdmOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzljZGJkNjMtOGYwMS00NDhiLThjMWUtZjJlOTRl
MWM5ZTdiLzUyMGEwZDVlNDViYTk4YjM2MjNmZDJlNGMyZjQ0ZDE5MjA3NmI3Zjgu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jOWNkYmQ2My04ZjAxLTQ0OGItOGMxZS1mMmU5
NGUxYzllN2IvNTIwYTBkNWU0NWJhOThiMzYyM2ZkMmU0YzJmNDRkMTkyMDc2Yjdm
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGyA3BMqYWy2ykSaiH5KJcGwrxTRt/Q+pbaMdnZ9SkD9Q+3n
VvxrCKqEDvo/LXh4LvW0AB+A4V2FH0umxclLF20BQrgaGd+ivooqF2CtqGc1wZab
39c2MAM0xxIiL/j3T52YRLGxcPsVRAILqTreh9PWXheLxbLuEPCt1oRlo1v7TJoU
FCpKi9w+TF3seQuwMA3HD4X6hiL0xPLoNmt6FLP1bTNaLhbA+79bNxVxgKRHh+Kb
BOeAXTcIBYJvlqiCbCkhAQOZOuGXdmU2mJtfZfJ8AwndohzGACITful9Cpzdy5m8
XJ8q2zk4DO5RwzI+CAMfFyFQbauS8SF0rECV9WM=
-----END CERTIFICATE-----
Generated at Thu Mar 28 16:04:23 2024 by rpki-client on console-ams.rpki-client.org